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CONTROL SYSTEM SIMULATION, TESTING, AND OPERATOR TRAINING 

This application claims the benefit of U.S. Provisional Application No. 60/177991, 
U.S. Provisional Application No. 60/1 77899, and International Application No. 
PCT/USOO/07962, each of which is incorporated herein by reference in its entirety. 

Field of The Invention 

The field of the invention is control system simulation, test, and training systems. 

Background of The Invention 

Control systems incorporating PLCs (Programmable Logic Gontrolers) and PCSs 
(Distributed Control Systems) are frequently used to control real world processes by 
accepting inputs which typically originate from sensors such as, among others, those used to 
sense temperature, flow, level, radiation, light, movement, and pressure, and those used in 
generating outputs which are used to drive actuators such as hydraulic devices, valves, lights, 
and motors. Control systems can often be viewed as having a control component and an 
interface component, with one or both components having both hardware and software sub- 
components. Thus a PLC based device might utilize a digital PLC having embedded software 
as the control component (the "controller"), with an interface component (the "I/O interface") 
(a) accepting signals from sensors and converting them into a form acceptable to the PLC, 
and (b) accepting outputs from the PLC and converting them to signals suitable as inputs to 
the actuators. In such systems, the controller and I/O interface are often connected by one or 
more paths (the "coniroller-1/0 communication channel) to allow communication and control 
signals to pass between the controller and the I/O interface. Similarly, the I/O interface is, 
after the control system is installed in its operating environment, connected via one or more 
electrical paths (the "field wiring") to the components from which the control system receives 
its inputs, and to the components to which the control system directs its outputs, with the 1/0 
interface being provided with a plurality of connectors ("field I/O connectors") which 
facilitate connecting the I/O interface with the field wiring. Many control systems will also 
incorporate a human-machine-interface (HMI) component comprising hardw^are and or 
software for facilitating operator interaction with the control system. Figure 1 illustrates such, 
a prior art control system 900 having a HMI 910, a controller 920, an VO interface 930, HMI- 
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controller communication channel 940, a controller-l/O communication channel 950, field 
wiring 960, and sensor/actuator components 970. In some instances, HMl 91 0 will be a 
general purpose computer running a windows based operating system and an application 
designed to facilitate operator interaction with the control system 900, and both the HMI- 
5 controller communication channel 940 and the controller-I/0 communication channel 950 
. will be implemented via the use of a local area network coupling the HMI 910, controller 
920, and I/O interface 930 together. Such a setup is shown in prior art figure 2 with HMI 
910, controller 920, and I/O interface 930 each being coupled to a network hub 980. 

It is often typical in development projects that a developer tasked by a customer to 
10 build a plant (including any control systems utilized therein) is given a set of requirements 
which the plant must satisfy before the developer is finished. This is particularly true for the 
plant control system, which plays a critical part in plant operation. At various stages of 
development, acceptance testing is performed to determine if the plant control system, to the 
extent that it is complete, continues to meet the requirements placed on the developer. 
15 During acceptance testing it is generally desirable to tie actions taken during the test and the 
outcomes of such actions to specific requirements so as to show whether the established 
requirements have been satisfied or not. 

Generating test plans, implementing those plans, and correlating test results with 
requirements to verify requirement satisfaction can be tedious, time consuming, and prone to 

20 errors. Although methods and devices for testing control systems are knownrthey generally 
have individual strengths and weaknesses which make them more appropriate in some 
situations and less appropriate in others, A primary weakness of most methods and devices 
for testing control systems is the inability to properly verify requirement satisfaction. This 
inability may be at least partially due to the fact that, once installed in a plant, the controller 

25 cannot be subjected to as complete or rigorous testing as it can in a lab environment. Another 
possible factor is the difficulty in correlating large amounts of test results to requirements. 
Thus, there is continuing need to improve the test generation and requirement verification 
process. 

In addition to the difficulties associated with testing and verification, training 
30 operators to use the HMI portion 91 0 of a control system can sometimes be difficuh to 
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achieve in a cost effective manner. Training operators on a "live" system (i.e. one already 
installed in an operating plant) is not a preferred method as it risks damage to the plant, 
wastage of material and generally requires that the plant be shut down or operated at less than 
full capacity during training. 

Training on live systems can be avoided through the use of simulators. Such 
simulators-exist,-but typically have been performed on large scale mock-ups (i.e. a physical 
model/re-creation of at least portions of the plant) which typically require large investments in 
mock-up environments and dedicated spaces in which they can be assembled. It is also often 
difficult and expensive to keep the mock-up in sync with plant changes. Moreover, training 
costs tend to increase substantially if operators must travel to an offsite location to be trained. 
Such travel is often necessary as it is often more cost effective (as much as the use of a large 
scale mock-up can be cost effective) to utilize a single large scale mock-up and training staff 
for training operators of similar plants than to have a large scale mock-up arid training staff at 
every plant. 

Thus there is a continuing need for improved training systems which allow operators 
to be trained to operate a plant control system without the use of large scale mockups and/or 
the necessity to travel away from the plant. 

Summary of the Invention 

Methods and apparatus are provided which allow control systems to be tested, and 
facilitate training operators to operate such control systems. 

For the purposes of testing, a test system is coupled to a control system in a manner 
which allows the test system to communicate with and drive the control system by sending 
and receiving signals via both the coniroiler-I/0 communication channel and the field I/O 
connectors, hi essence, the test system is used to both simulate a plant to be controlled and to 
monitor, validate, and or modify the internal state of the control system controller and 
possibly the control system 1/0 interface. Plant simulation is accomplished by simulating the 
1/0 devices to which the control system is coupled (and hence the plant processes) when 
installed in its operational environment. In addition to the simulation of I/O devices, the test 
system takes advantage of the fact that many commonly used controller and 1/0 interfaces are 
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capable of communiciation with other devices by using such communications abihty to 
provide instructions to or obtain information from a control system's controller(s) and I/O 
interface(s). 

As an aid in validation, the systems and methods disclosed herein utilize a 
requirements database and test generator ("RDTG") which consists of a set of software data 
tables and user screens to facilitate the entry of functional requirements for Progranmiable 
Logic Controller (PLC)/Human Machine Interface (HMI) or Distributed Control System 
(DCS) systems. The RDTG can also generate tests for functional and field testing. 

For training operators, the visual portions of a control system HMI are duplicated and 
coupled to a software and/or hardware simulator to allow simulated plant operations to be 
performed. In preferred embodiments, the duplicated visual portions of the HMI will be 
supplemented by audiovisual training aids such as audio and video clips. Various 
embodiments may also include the ability to compare operator performance to desired goals 
and/or other requirements. 

It is contemplated that the methods and apparatus disclosed herein will provide an 
effective approach to connecting a control system to be tested to simulated I/O devices and to 
controlling and monitoring the simulated I/O devices so as to produce inputs to the control 
system, to record outputs from the control system, and to compare the recorded outputs 
against an expected_value and record the result of the comparison for reporting purposes. 

It is also contemplated that the methods and apparatus disclosed herein will provide 
an effective approach to the staging and testing of PLC/HMls (Programmable Logic 
Controllers/Human Machine hiterfaces) and DCSs (Distributed Control Systems) before 
delivery to the field. 

It is also contemplated that the methods and apparatus disclosed herein will provide 
an effective mechanism for validating the operation of a control system once it has been 
installed in. a plant to be controlled. It is contemplated thai such a validation include the use 
of automatically generated reports showing the relationship between requirements, the tests 
used to. validate satisfaction of those requirements, and the results of -the validation tests. 
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It is also contemplated that the methods and apparatus disclosed herein will facilitate 

onsite/plant training of operators without requiring the creation of large scale mock-ups. 

I • 

Various objects, features, aspects and advantages of the present invention will become 
more apparent from the following detailed description of preferred embodiments of the 
5 invention, along with the accompanying drawings in which like numerals represent like 
components. 

Brief Description of The Drawings 

Fig. 1 is a schematic view of a prior art control system. 

Fig. 2 is a schematic view of a second prior art control system. 

10 Fig. 3 is a schematic view of a test system. 

Fig. 4 is a schematic view of the test system of Fig. 3 coupled to the prior art control 
system of Fig. 2. 

Detailed Description 

Test System r Overview 

15 Referring to figure 3, a teist system 100 includes configurator 110, I/O simulator 120, 

and possibly a network hub 1 80. Referring lo figure 4, test system 1 00 may be coupled to. a 
control system ("CS") 900 by coupling I/O simulator 120 to I/O interface 930 via wiring 
harness 150 and/or by coupling the 1/0 simulator 120 and configurator 1 10 . to the controller- 
yOnetworkof CS 900. 

20 Test system 100 uses wiring harnesses 150 to send and receive VO signals to and from 

I/O interface 930 so as to simulate the input devices/sensors 971 and 973, and output 
devices/actuators 974 and 976 which would be connected via the field wiring 960 to target CS 
900 when target CS 900 is installed. Test system 100 uses the network connection to the CS 
to obtain register and status infoniiation frbm 1/0 Interface 930, HMl 91 0 and PLC 920. By 

25. monitoring the internal state of and data flow between 1/0 Literface 930, HMl 910 and PLC 
920, test system 1 00 is better able to isolate any problems that may occur in target CS 900 
during testing as occurring in a particular subsystem of target CS 900. If necessary, any one 
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of the I/O interface 930, HMI 910, and PLC 900 can be tested and/or monitored 
independently rather than in combination as is likely to be a more typical scenario. The 
manner in which test system 100 is coupled to target CS 900 also permits test system 100 to 
test multiple I/O channels and or subsystems of target CS 900 simultaneously. 

5 The test system is preferably automatically initialized by utilizing its connection to the 

controller-I/O network to query target CS 900 to obtain information which allows test system 
100 to perform automatic initialization and mapping of its input and outputs to those of target 
CS 900. Test system 100 incorporates a knowledge base which includes characteristics of 
known control system hardware and software components in performing such automatic 

10 initialization. It is contemplated that the knowledge base might be extended to include 
mathematical models of standard components such as sensors and actuators to allow test 
system 100 to better simulate such components and to allow automatic test generation for 
target systems which will be coupled to such components. 

Test System - Offsite Testing 

15 Test system 1 00 is contemplated as being beneficial in the development and offsite 

testing of target CS 900 by simulating the plant which target CS 900 is intended to control. If 
the capacity of a single test system 100 is insufficient to simulate an entire plant, multiple test 
systems 100 can be used to achieve the simulation. Such a combination of test systems 100 
may utiHze multiple HMI 110 devices, or may share a single HMI 1 1 0: Test system 100 is . 

20 also contemplated as being beneficial for offsite training of personnel in the operation of 
target CS 900 when test system 1 00 is used in conjunction with target CS 900. Such offsite 
use of test system 100 is contemplated as providing, among others, complete testing of all 
target CS 900 inputs and resulting outputs before field installation 

Test System - Onsite Testing 

25 Onsite testing is also contemplated as benefiting from the use of test system 1 00, 

either in its entirety or only its configurator/HMI portion. Once target CS 900 is installed in 
its operational environment, configurator 1 10 can be used as a test and validation tool. The 
configurator 1 10 can provide step-by step instructions to a field tester which, if followed, 
result in a desired level of testing of target CS 900. By doing so, configurator 1 10 essentially 

30 controls the test process through the field tester. By requiring feedback from the field tester 
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upon the completion of various portions of the testing, a test report which includes the tests 
steps performed and the tester responses can be generated so as to provide assurance that the 
required level of testing has be completed. Such ^'controlled" testing thus provides a method 
of repeatable, validated and verified testing. Configurator 110 can also be used to record the 
results of such testing and to generate reports in the field which provide feedback as to the 
current state of target CS 900 and the field wiring to which target CS 900 is coupled. 

If the entire test system 100 is used onsite, test system 100 can be interchanged with 
selected inputs and outputs of target GS 900 so as to allow ''live" inputs to cause target CS 
900 to control simulated actuator components, or to use simulated inputs to cause target CS 
900 to control "live" actuator components, or to mix and match live and simulated inputs and 
outputs as desired. If configurator 1 10 is still attached to the rest of test system 100 during 
testing, and if test system 100 is coupled to target CS 900 during testing, configurator 110 can 
control the test process both through direct interaction with target CS 900 and through a test 
operator as previously discussed. 

Configurator 

HMI/configurator 110 of test system 100 is contemplated as being a general purpose 
computer such as a laptop PC CTC"). Portability is particularly desirable. as it facilitates the 
transportation of HMl 110 into the field to support onsite testing of an installed target CS 
90.0. HMl 1 1 0 is contemplated as incorporating software which allows testing of alarm 
responses (including deadbands), loops, andlbgic, and reporting of HMl readouts, trend 
graphs, alarms, reports, system requirements, etc. Test results are stored in the form of 
textual date and time stamped data, graphs, and tester responses to prompted questions. 

In a preferred embodiment, HMl 1 1 0 includes a multi-tasking operating system, 
preferably Windows NT™, which is capable of supporting a graphical user interface ("GUI") 
and a relational database system (preferably Microsoft Access™), as well as software for 
controlling I/O simulator modules 120, and testing target CS 900. HMl 110 is also preferred 
to include an Ethernet network interface card for connection to the controller-I/Q network 
which is often a TCP/IP based Ethernet network. It is also preferred that HMl 1 1 0 of test 
system 1 00 be detachable from the rest of test system 1 00 to allow it to he used independently, 
as an onsite verification tool. 
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As previously discussed, the HMI/configurator portion 1 1 0 of test system 1 00 is 
useful both in the operation of test system 100, but also as a detachable validation and/or 
training tool. It is contemplated that HMl/configurator 1 10 comprise the software and one or 
more databases necessary to allow it to perform its training and/or validation functions. Such 
functions might include, among others, the ability to control access by requiring an operator 
to log in, the ability to simulate a particular function and to test the capability of the target CS 
to respond to a sensor's entire raiige of input, the ability to prompt the operator to perform 
operations using the target CS HMI, and automatically performing tests against target CS 
when such tests do not require manual operations by an operator. 

Configurator - Interactive Testing 

A particular configurator embodiment is likely to have the ability to store and run 
multiple tests \yherein each test comprises one or more steps. In running a particular test or 
sequence of test steps, the configurator will prompt the operator to perform a function on the 
target CS whenever manual intervention by the operator is required, but will automatically 
(i.e. without operator action) run through any tests steps which do not require such manual 
intervention. Thus, to test a pump, the configurator may prompt an operator to turn on the 
pump, then, after the operator has indicated to the configurator that he has turned on the 
pump, the configurator will ask a question to verify proper operation of the pump such as 
"Did the pump indicator light turn on?" which the operator can either respond to affirmatively 
or negatively. If negatively,, the configurator will prompt the operator to enter a comment as 
to what response by the target CS was actually seen. During another step, the configurator 
may generate simulated events to which the target CS has automated responses which can be 
detected by the configurator and in which case the simulator will simply simulate the events 
and monitor the target CS's response. As an example, if a power voltage level exceeds a 
threshold amount the target CS may be required to cut off the source of power. Such a test 
would be performed by the simulator at the appropriate point in a test sequence by sending an 
over voltage signal to the target CS and monitoring the response of target CS to see if a power 
cutoff signal is sent. Test results, whether operator responses or automatically monitored 
events/values are also stored in one or more databases so that an exceptions report comparing 
actual target CS responses to expected results can be generated. 
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Configurator - test Databases 

It is contemplated that the configurator will comprise a scalable library of test 
databases and test functions utilizing the test databases to perform the test steps. Utilizing 
database tables to store tests and test parameters allows a tester to add new tests and/or test 
5 scenarios, and also to modify parameters for existing tests. Such scalable libraries and 
dynamic updates make for a much more robust and flexible system. 

HMl/configurator 110 provides for downloading test relational databases, initiating 
tests and capturing tester responses and comments, and generating reports. The test databases 
include test cases, expiected results for test comparison and exception generation. An overall 
10 test planner database organizes the sequence of test events. Being as the test databases are 
derived from the requirements database, the system owner is assured of lock-step 
configuration control and traceable requirements testing. 

Configurator - Requirements Database and Test Generator 
A requirements database and test generator ("RDTG") consists of a set of software 
15 data tables and user screens to facilitate the entry and maintenance of complete fiinptional 
requirements in database format for Programmable Logic Controller (PLC)/Human Machine 
Interface (HMI), or Distributed Control System (DCS) systems. The RDTG also generates 
tests for functional and field testing for use by the simulator system described in U.S. 
provisional application number 60/1 26060 ("test system") incorporated herein by reference in 
20 its entirety. 

The RDTG data tables contain information that is used in implementing and testing of 
a target control system. The information in the data tables is gathered during requirements 
definition, also referred to as the Description of System Requirements (DSR), and contains 
information about all aspects of the system, including architecture, tags, networking, loops 
25 (e.g., FID, etc.), alarms, instrument indications, trending, general requirementis, etc. This 
information is stored in a tagbase section (numerical data), testbase section (descriptive data 
for QTP and ATP), and expected results section. Requirements may be stored and/or 
presented in any multimedia format, including text, graphics, and sound , bnplementation of 
the system by developers is managed via this required system functions set. . . 
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After implementation (complete or partial), RDTG will automatically generate a series 
of requirements-associated pre-defined test and test case data tables for the test system for 
pre-field/offsite and at-ficld/onsite testing (e.g., PLC, HMl, wiring, field connections, loops, 
logic, instruments, control elements, etc.). This ensures that all requirements, and testing of 

5 those requirements, and any changes to the system are kept in "lock-step" to ensure a reliable 
product, by means of electronic test, documentation and results. The RDTG can also be used 
for a rapid update of requirements and revalidation of any changes via the test system. The 
test system testing engine utilizes these RDTG predefined test and test case data tables to run 
tests per the proper sequence, and reports the passing and failing results automatically. This 

1 0 verifies the configuration and programriiing of a target control system. 

Therefore, three levels of testing are performed with these RDTG data tables. The 
first level is a checkout of the system during development, as required. The second level is 
the fiinctionality test, or Qualification Test Procedure (QTP). In the QTP, the system's 
functions are thoroughly checked by the test system against the requirements set forth by the 
1 5 client in the DSR (encapsulated in the RDTG data tables). The third level of testing 

performed by the test system is by the Acceptance Test Procedure (or ATP) which occurs 
when the QTP-tested system is installed in the field, and tested per a second set of RDTG- 
configured data tables. Any test exception triggers a relest on the failed test, plus any listed 
prerequisite test. ^ 

20 The RDTG provides many advantages including, but not necessarily limited to, the 

following: (1) provides complete functional requirements database(s) for a target PLC/HMI 
system (probably in the form of Boolean expressions relating tags and data values); (2) 
generates, from the functional requirements database(s), test databases automatically for the 
test system for pre-field and at-field testing (e.g., PLC, HMI, wiring, field connections, . 

25 loops). By having the RDTG generate the test databases there is a higher level of assurance 
that requirements, testing of those requirements, and any changes to the system are kept in 
"lock-step" to ensure a reliable product, by means of electronic test, documentation and 
results; (3) provides automatic document production, including requirements documentation, 
user manuals, operational procedures, instrument data sheets, instrument indices, instrument 

30 loop diagrams, validation reports, and test reports, including exception and passing reports. 
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The system can be used for rapid update of requirements, revalidation of any changes, and 
instant update of related system documentation, thereby providing automatic configuration 
control. 

Wiring Harness 

5 Wiring harness 1 50 may take on almost any form so long as it properly transmits I/O 

signals between test system 100 and target CS 900. However, it is preferred that wiring 
harnesses 150 be chosen lo facilitate the coupling of target CS 900 to test system 100 and the 
simulation of the field wiring to which target CS 900 will be coupled in its operational 
environment. It is contemplated that several different harnesses may be included with the test 
10 system 100 with each harness being designed to facilitate the coupling of test system 100 to a 
particular type of target CS 900. The inclusion of such pre-configured harnesses is 
contemplated as facilitating the use of test system 1 00 to test a variety of standard control 
s>'stems such as Allen-Bradley PLC-5 controllers or Siemens S7 controllers. 

Example Application 

15 Test system 100 is contemplated as being particularly well suited for a number of uses 

when taken to an operational facility and connected in place of all or part of the field wiring 
including but not necessarily limited to: (1) testing existing logic for reaction to new 
scenarios; (2) testing new logic for operations; (3) training process operators prior to an 
operational campaign to a) score and validate operator readiness, b) identify deficient training 

20 areas, aiid~c) ensure operational readiness as an overall team;" (4) training process operators at 
the operational facility using by plugging test system 1 00 in place of the plant's actual sensors 
and actuators; (4) field trouble shooting of wiring and other field related problems. 

Example - Offsite Testing 

An example application of test system 100 is its in revalidating a PLC program used 
25 to manufacture a drug wherein the PLC does so by controlling ingredient weighing, heating, 
cooling, tank level control, pump control, and other portions of the manufacturing process. 
This example refers to target CS 900 as if it were the system to be re-validated. Revalidation 
of the PLC program of target CS 900 would involve first using the test system 100 to perform 
offsite testing of target CS 900, and then detaching the HMI/Configuraior from the rest of test 
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system 100 and taking it onsite in the field with target CS 900 when target CS 900 is installed 
at the drug production facility. 

During offsite/lab testing, I/O simulation modules 120 are used to provide an input to 
each of the PLC 1/0 channels via field I/O connectors 225. The test system automatic 

5 initialization routines create a mapping between the target PLC and test system I/O channels. 
A tester would log into the test system configurator computer/HMI 110 (requiring operators 
to log in facilitates future auditing). After logging in, test databases are downloaded from a 
requirements database that was established for target CS 900 at the project start. The test 
databases are then used to test all functions of the PLC, HiMl and network including alarms, 

1 0 loops, and field wiring to satisfy the testing requirement contained in the test databases. Such 
testing is accomplished via a series of automatic tests, as well as tests which prompt the 
operator to perform certain actions and to provide responses/inputs to the HMI after 
performing such actions. The testing of alarms includes the testing of deadbands, and 
appropriate low-low, low, high, and high-high alarm ranges as well as other types of data 

1 5 deltas. All data can be stored electronically with a date and time stamp as well as.with other 
audit information as necessary. 

Once offsite/lab testing is complete, the test system configurator/HMI 1 10 is datached 
from the test system and target CS 900 and taken to the field to be used onsite to test target 
CS 900 once it is installed in the drug production facility. In the field, the test system 

20 configurator provides a field tester with a series of tests related to field I/O and wiring 

connections. For some tests, the field tester is prompted by the test system configurator to 
instruct a technician, possibly via cell-phone, to input signals to the system which will be 
passed to target CS 900 via the field wiring. The test system configurator 1 10 then prompts 
the field tester to enter responses answering questions related to the feedback HMI 230 of 

25 target CS 900 provided to the tester in response to the technician's inputs. All test questions 
and results are stored so as to allow a report of test results to be generated. 

Example - Onsite Testing 

Once test target CS 900 is installed in the drug production facility, test system 100 can 
periodically be used to train process operators. Such training can be done on site, using the 
30 target CS 900 HMI by simply disconnecting target CS 900 fi-om the plant's sensors and 



wo 01/53841 



-13- 



PCTAJSOl/02559 



actuators, probably by disconnecting the field wiring, and connecting test system 1 00 to target 
CS 900 in place of the sensors and actuators. Once target CS 900 is operating with simulated 
I/O rather than live sensors and actuators, operators are free to interact with target CS 900 
without any fear of consequences to the plant. When used in such a manner, the test 

5 procedures used to validate target CS 900 may be used in training operators, or else test 

. system 20 may incorporate specific software and/or data for training operators. Such software 
and/or data may incorporate multi-media presentations such as training videos. Test systern 
20 may also work partially or completely independently of the operator so as to simulate 
events, track operator responses to the simulated events, and/or report on the quality of the 

1 0 operator's responses, without the operator having to interact with Test system 20 during 
training. 

Software Based Training 

It is contemplated that operator training can be improved through use of the test 
system previously described or through an independent, software only solution stored on a 
1 5 computer readable removable media such as a DVD or CD-Rom. 

A method for training an operator to operate a plant control system may comprise: a) 
simulating the HMl portion of the plant control system; b) simulating the control portion of 
the plant control system; d) simulating the plant itself; e) coupling the simulated HMI, control 
system, and plant components together such that operator interaction with the simulated HMI 
20 results in the HMI being updated as if the operator was interacting with the HMI portion of a 
live control system; and f) causing the operator to interact with the simulated HML 

For control systems utilizing hardware I/O such as control panels comprising knobs, 
switches, and dials, simulating the HMI involves creating graphic representations of the 
control panels and the controls contained thereon. For software based systems, it involves 

25 reproducing the HMI, either by duplicating the HMI software, or by taking pictures of the 
interface (via screen capture techniques) and coupling the pictures to software which can 
accept and monitor user inputs and updating the visual images seen by the operator. 
Duplicating the HMI software and coupling it to a controller simulator and/or plant simulator 
tends to result in a very realistic simulation. However, doing so frequently requires that the 

30 HMI software be modified. Modification of the HMI software is not always desirable in that 
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it may introduce errors into the simulation. Moreover, it typically requires a license and 
access to the source code of the HMI to duplicate and/or modify it. Both the source code and 
a license to copy and modify can be hard to come by if a developer of training materials is not 
associated with the HMI software developer. In such cases, screen shots of the visual aspects 
5 of the HMI can be used to simulate the HMI. 

The controller simulator is preferably modeled via software. The plant simulator may 
be hardware andi/or software based. Hardware based plant simulation can be accomplished 
via the previously described test system. Software based plant simulation can utilize simple 
models such as simply using process test data, or complex utilizing sophisticated math 
1 0 models, or a hybrid of the two. Typically a combination of the two are needed to create an 
effective simulation of the process. 

The simulator system can be better adapted to training by adding scoring modules and 
the desired starting conditions. Heuristics can also be added to adjust the training content and 
scenario at run-time. 

15 Simulation allows training and testing sequences, i.e. emergency situations, which 

would otherwise not be possible. Both simulation and training systems can be placed upon 
CD-ROM, DVD, etc. and run, independent of the control system. 

An example embodiment is a simulator system for simulating a monitoring system for 
sluicing operations. The actual operator HMI of the sluicing monitoring system is used as the 

20 "front-end" and a simulation engine resides in code with scenarios programmed for the 

operators' training exercise. All HMI screens, code and data files reside on CD-ROM. When 
placed in any personal computer type-machine with a CD-ROM, the installer automatically 
runs the application and the user is presented with one of several scenarios to choose from.. 
The simulation then starts giving different operational scenarios that are scored based on 

25 criteria. When the person makes a decision to monitor one device, heuristics interject and 
make adjustments to that scenario, testing the person's skill. Video files are available, as are 
sound, and procedures for detailed training are also available. 



wo 01/53841 



.15. 



PCT/USOl/02559 



It is contemplated that in some instances it may be beneficial to combine testing and 
training so that an operator learns how to use a control system at the same time the system is 
tested. 

Conclusion 

5 Thus, specific embodiments and applications of devices and methods for plant 

. simulation, plant control system testing, and plant operator training have been disclosed. It 
should be apparent, however, to those skilled in the art that many more modifications besides 
those already described are possible without departing from the inventive concepts herein. 
The inventive subject matter, therefore, is not to be restricted except in the spirit of the 

10 appended claims. Moreover, in interpreting both the specification and the claims, all terms 
should be interpreted in the broadest possible manner consistent with the context. In 
particular, the terms "comprises" and ^'comprising" should be interpreted as referring to 
elements, components, or steps in a non-exclusive manner, indicating that the referenced 
elements, components, or steps may be present, or utilized, or combined with other elements, 

1 5 components, or steps that are not expressly referenced. 
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CLAIMS 

What is claimed is: i 

1 . A test system for testing a control system comprising: 

a configurator having a set of tags, each tag being a label which corresponds to a 
component of the control system to be tested; and 

a set of requirements wherein each requirement comprises at least one tag and at least 
one Boolean operator. 

2. The test system of claim 1 further comprising an I/O simulator, a mechanism for 
automatically generating at least one set of instructions for the I/O simulator from 
each requirement, and a mechanism for transmitting the at least one set of instructions 
for the I/O simulator to the I/O simulator. 

3. The test system of claim 2 wherein each tag has a corresponding component type, and 
the configurator includes a set of parameter values wherein each parameter value 
corresponds to a component type and at least some of the parameter values are used in 
generating the at least one set of instructions for the I/O simulator. 

4. The test system of claim 3 further comprising a set of questions with the test system 
prompting an operator for responses to the questions and recording any operator 
response to the questions. 

5. The test system of claim 4 further comprising a graphical user interface (GUI) 
providing a mechanism for an authorized operator to maintain the set of tags, the set 
of requirements, the set of subsets of parameter values, and/or the set of questions. 

6. A method for training an operator to operate a plant control system comprising: 
simulating the HMI portion of the plant control system; 

simulating the control portion of the plant control system; 
simulating the plant itself; 
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coupling the simulated HMI, simulated control system, and simulated plaiit 

components together such that operator interaction with the simulated HMI results 
in the HMI being updated as if the operator was interacting with the HMI portion 
of a live control system; and 

causing the operator to interact with the simulated HMI. 

7. The method of claim 6 wherein the HMI portion of the plant contro] system comprises 
a computer display screen, arid simulating the HMI portion of the plant control system 
includes obtaining images of the display screen during operation of the HMI, and 
utilizing the obtained images in simulating the HMI portion of the plant control 
system. 

8. The method of claim 7 wherein the simulated HMI, simulated control system, and 
simulated plant are each software based and stored on a renriovable storage medium, 

9. The method of claim 8 wherein the storage medium is a CDROM or DVD disk. 

10. The method of claim 9 wherein the siep.of simulating the plant is accomphshed via a 
hardware simulator. 

11: A method of testing and training comprising: 

providing a control system to be tested; 

. providing an operator to be trained; 

coupling a test and training system to the control system; 

causing the operator to interact with the control system; 

causing the test and training system to report the quality of the operator's performance 
and the quality of the control system's performance during the period when the 
operator was interacting with the control system. 
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12. A system for testing a control system comprising an HMl, a PLC, and an I/O interface 
wherein the system can test each of the HMI, PLC, and I/O interface either 
individually or in combination with each other. 

1 3. The system of claim 1 3 wherein testing each of the HMI, PLC, and I/O interface is 
accomplished by directly manipulating the inputs and monitoring the outputs of the 
HMI, PLC, and the I/O interface. 
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